Manual Chapter : Overview: Ephemeral Authentication using RADIUS Proxy with WebSSH

Applies To:

  • BIG-IP APM

    21.0.0, 17.5.1, 17.5.0, 17.1.3, 17.1.2, 17.1.1, 17.1.0, 17.0.0, 16.1.6, 16.1.5, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 16.0.1, 16.0.0

Updated Date: 07/07/2026

Overview: Ephemeral Authentication using RADIUS Proxy with WebSSH

In this example use case, ephemeral authentication is configured on Access Policy Manager (APM) using RADIUS authentication with WebSSH. A sample deployment is shown here:

This deployment requires configuring the following elements:

  • Ephemeral Authentication Configuration
  • SSH Security Configuration
  • Ephemeral Authentication Access Configuration
  • WebSSH Resource
  • Ephemeral RADIUS Authentication Configuration
  • Webtop
  • Access policy
  • Connectivity profile
  • Two virtual servers; one for RADIUS and one for Ephemeral Authentication
  • SSO Configuration

Follow through the tasks to set up ephemeral authentication using RADIUS with WebSSH.